VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2354

CVE-2004-2354

Description

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.

Affected products

10
  • PHP-Nuke/PHP Nuke9 versions
    cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*
    • cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*
  • Warpspeed/4nguestbook
    cpe:2.3:a:warpspeed:4nguestbook:0.92:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.